Vulnerability in Sinotrack Iot Pc Platform
CVE-2025-5484
A username and password are required to authenticate to the central SinoTrack device management interface. The username for all devices is an identifier printed on the receiver. The default password is well-known and common to all devices. Modification of the default password is not enforced during device setup. A malicious actor can retrieve device identifiers with either physical access or by capturing identifiers from pictures of the devices posted on publicly accessible websites such as eBay.
EPSS: 0.004 (35.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L.
Affected products
- Sinotrack Iot Pc Platform — versions All versions
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-5484?
- CVE-2025-5484 is a high-severity vulnerability in Sinotrack Iot Pc Platform, classified under Weak Authentication. CVSS score: 8.3/10. Published 2025-06-12.
- How severe is CVE-2025-5484?
- High severity. CVSS v3 base score is 8.3 out of 10.